Privacy Policy

2. Data We Collect

We collect personal data only where it is necessary for a specific, legitimate purpose. The types of data we may collect include:

• Contact information: Name, email address, telephone number, business address.
• Business information: Details about your business shared during an engagement — including financial data, operational details, or strategic plans.
• Enquiry details: Information submitted through our website contact form or by email.
• Website usage data: Technical information such as browser type, IP address, and pages visited, collected via cookies and analytics tools.

Legal basis for processing

We process personal data on one or more of the following grounds:

• Your consent (for marketing communications and optional cookies)
• Performance of a contract or pre-contractual steps at your request
• Our legitimate interest in operating and improving our practice
• Compliance with a legal obligation

3. How We Use Your Data

Personal data is used only for the purposes for which it was collected:

• Responding to enquiries and arranging initial consultations
• Delivering consulting services and producing written outputs
• Communicating about ongoing engagements
• Sending follow-up materials as described in the agreed scope
• Complying with our legal and regulatory obligations
• Analysing website usage to improve our online presence (anonymised data)

We do not sell, rent, or share personal data with third parties for marketing purposes. Data shared during consulting engagements is held strictly confidentially and is not used for any purpose beyond the engagement itself.

4. Data Retention

We retain personal data only for as long as is necessary:

• Enquiry data not leading to an engagement: deleted within 12 months
• Client engagement records: retained for 7 years for compliance and audit purposes
• Website cookies: as described in our Cookie Policy

5. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include:

• Encrypted email and file storage
• Access controls limiting data to authorised staff only
• Physical document security for any paper records
• Prompt notification in the event of a data breach, as required under Malaysian law

6. Cookies

Our website uses cookies to understand how visitors interact with it. Essential cookies are required for the site to function; optional analytics and preference cookies are used only with your consent. Full details and controls are available on our Cookie Policy page.

7. Your Rights

Under the Malaysian Personal Data Protection Act 2010, you have the following rights in relation to your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data.
• Withdrawal of consent: Withdraw consent to data processing where consent is the basis for processing.
• Restriction: Request that we limit how we use your personal data in certain circumstances.
• Objection: Object to the processing of your personal data for direct marketing purposes.
• Complaint: Lodge a complaint with the Department of Personal Data Protection (JPDP) if you believe your rights have been infringed.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

8. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal data.

9. Children's Privacy

Our services are directed at business owners and managers and are not intended for persons under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted personal data to us, please contact us promptly so we can arrange for its deletion.

10. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. The date at the top of this page indicates when it was last revised. For significant changes, we will notify active clients by email.

11. Data Controller Contact

For data protection enquiries, contact us at: